$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: K/KOkJQHs0zZLdDoKWAUrCcFXg/fb9aOPnpJtoRClwY= Subject key identifier: B6:6D:C9:8F:4F:D3:C9:26:AC:71:C8:A1:5E:4F:F3:4F:3F:33:66:5A Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 236846C624544625A97A6C9F29E3865B183E4F03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01A4 Signing time: Tue 05 Aug 2025 05:10:45 +0000 Manifest this update: Tue 05 Aug 2025 05:05:45 +0000 Manifest next update: Fri 08 Aug 2025 16:02:45 +0000 Files and hashes: 1: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=) 2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: gB0ujnm3fUrV2TtTieZHd3r/YFLuYK/QS22WbWUMXFM=) 3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 16:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:68:46:c6:24:54:46:25:a9:7a:6c:9f:29:e3:86:5b:18:3e:4f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Aug 5 05:05:45 2025 GMT Not After : Aug 8 16:02:45 2025 GMT Subject: CN=B66DC98F4FD3C926AC71C8A15E4FF34F3F33665A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:fa:b6:b1:b3:99:2f:41:21:7c:7f:89:23: 7e:3d:af:37:a2:ac:25:ac:a8:95:37:3a:34:aa:d6: e9:a9:6a:b6:64:d6:93:77:34:af:15:0c:82:76:a0: cb:23:e5:dd:d2:a6:5e:ee:73:08:40:0c:02:e0:7c: 4c:7e:81:5d:b6:7e:c5:32:eb:1d:8b:7c:71:cd:e8: c3:5a:6b:8f:2e:b4:82:f2:25:b0:c3:a5:21:dc:22: 45:88:7d:c0:33:a1:cc:7b:dc:00:bf:c8:64:ba:e5: 47:fe:68:05:e2:6b:a7:19:64:66:ea:d1:01:6d:7c: d1:ce:a3:4c:33:f1:31:19:dd:d1:70:31:56:f7:fb: c8:1b:09:19:74:1d:fb:ee:4e:85:4a:00:97:09:02: 4a:a4:c8:ea:38:16:7c:b9:34:9a:61:db:22:fd:83: 50:93:b8:af:2f:8a:ac:e2:9b:5d:03:b2:c9:9f:a4: 15:48:2e:ea:5d:fb:23:65:95:59:57:e6:00:bd:b5: 4b:52:e8:5f:a7:6a:9f:a1:3f:d2:66:0c:c9:91:ca: b9:5b:37:78:a5:8c:57:ca:42:a0:a3:30:74:56:a6: fa:6d:8c:f8:77:43:49:13:8f:3e:24:d3:3f:f7:fb: e0:fb:08:34:f6:7a:9e:86:08:1a:f3:73:a4:4b:7c: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6D:C9:8F:4F:D3:C9:26:AC:71:C8:A1:5E:4F:F3:4F:3F:33:66:5A X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:53:0d:1c:b4:5b:6e:17:bc:b6:a0:3b:17:7d:49:00:de:91: 47:18:6c:9f:ed:c8:9e:1f:49:ca:22:9f:35:a2:eb:a8:63:53: d7:90:97:86:88:65:85:65:57:fe:ab:2d:7a:31:23:4e:b1:59: 8a:c3:a3:d5:65:1a:3d:85:fc:a6:45:d9:32:fd:32:27:7c:7f: 3d:f9:35:6d:59:38:fa:6b:db:41:ed:58:e3:bc:de:c9:57:9e: fb:d1:1f:6e:66:10:b7:03:d9:ee:a5:b1:6f:94:7c:1b:bb:52: 0c:56:3c:94:14:9e:be:d9:ea:d3:fa:d3:18:9e:43:d0:cf:23: 0e:08:42:2a:94:f5:50:a3:54:c7:e0:71:7f:2f:02:dd:b3:80: 5c:ba:9f:7c:9c:48:43:33:4c:1d:c2:70:ce:44:f6:d9:12:4c: 05:df:d0:90:67:7f:2b:41:99:ee:a7:c8:69:e4:ff:07:49:e3: f7:03:c0:47:8c:4a:3f:4a:54:b0:5d:77:6d:bb:92:d7:0c:79: 1f:88:31:a1:49:5f:6c:f1:1e:5f:03:fb:1e:9e:61:1c:28:96: 1a:ea:ee:c2:4f:ed:1d:ce:94:b5:a5:ff:b1:30:34:f9:68:45: 61:f4:fd:1c:29:08:d4:95:fe:5e:b3:3b:80:61:2c:80:8c:fa: 43:de:a7:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2hGxiRURiWpemyfKeOGWxg+TwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTA4MDUwNTA1NDVaFw0yNTA4MDgxNjAyNDVaMDMxMTAvBgNV BAMTKEI2NkRDOThGNEZEM0M5MjZBQzcxQzhBMTVFNEZGMzRGM0YzMzY2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdfq2sbOZL0EhfH+JI349rzei rCWsqJU3OjSq1umparZk1pN3NK8VDIJ2oMsj5d3Spl7ucwhADALgfEx+gV22fsUy 6x2LfHHN6MNaa48utILyJbDDpSHcIkWIfcAzocx73AC/yGS65Uf+aAXia6cZZGbq 0QFtfNHOo0wz8TEZ3dFwMVb3+8gbCRl0HfvuToVKAJcJAkqkyOo4Fny5NJph2yL9 g1CTuK8viqzim10DssmfpBVILupd+yNllVlX5gC9tUtS6F+nap+hP9JmDMmRyrlb N3iljFfKQqCjMHRWpvptjPh3Q0kTjz4k0z/3++D7CDT2ep6GCBrzc6RLfMb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtm3Jj0/TySasccihXk/zTz8zZlowHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5TDRy0W24XvLagOxd9SQDekUcYbJ/tyJ4f ScoinzWi66hjU9eQl4aIZYVlV/6rLXoxI06xWYrDo9VlGj2F/KZF2TL9Mid8fz35 NW1ZOPpr20HtWOO83slXnvvRH25mELcD2e6lsW+UfBu7UgxWPJQUnr7Z6tP60xie Q9DPIw4IQiqU9VCjVMfgcX8vAt2zgFy6n3ycSEMzTB3CcM5E9tkSTAXf0JBnfytB me6nyGnk/wdJ4/cDwEeMSj9KVLBdd227ktcMeR+IMaFJX2zxHl8D+x6eYRwolhrq 7sJP7R3OlLWl/7EwNPloRWH0/RwpCNSV/l6zO4BhLICM+kPep/k= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:04 2025 by rpki-client